Privacy policy

1.   Who we are

  • Rummy (the “Company”) acts as the data controller for personal data collected through our websites, apps, and other services (collectively, the “Services”).
  • Contact for privacy matters: rummyua@gmail.com; rummywhy@gmail.com; Telegram: @rummycore.

2.   What data we collect

  • Identifiers: name, email address, phone number.
  • Ordering and delivery data: shipping address, city, country.
  • Payment data: card details are processed by payment processors; we do not store full card numbers on our servers.
  • Usage data: IP address, device information, browser type, language, cookies and similar technologies.
  • Communications: records of conversations and communications with us.

3.   How we use your data

  • To process orders and deliver products.
  • To manage accounts, respond to inquiries, and provide customer support.
  • To improve our services, detect and prevent wrongdoing, and secure the platform.
  • To conduct marketing and send promotional communications (where consent is given or where permitted by law).
  • To analyze usage and performance for product and service improvements.

4.   Legal bases for processing

  • Contract performance and taking steps at your request.
  • Legitimate interests (security, fraud prevention, service improvement).
  • Consent (for marketing and cookies or other processing requiring consent).
  • Compliance with legal obligations (where applicable).

5.   Sharing your data with third parties

  • Payment processors and financial institutions.
  • Delivery and courier services.
  • Service providers (hosting, analytics, customer support, email marketing).
  • Other partners as required by law or to provide the Services.

6.   International transfers

  • Your personal data may be transferred to countries outside your home country. We use standard contractual clauses, privacy shields (where applicable), or other lawful mechanisms to protect your data.

7.   Data retention

  • We retain personal data for as long as necessary to provide the Services and fulfill the purposes described, including for satisfying any legal, accounting, or reporting requirements.
  • Data used for marketing is retained until you opt-out or unsubscribe (where applicable).

8.   Your rights

  • Access, correct, delete, restrict processing, object, and data portability.
  • Withdraw consent at any time (where consent is the basis of processing).
  • Lodge a complaint with a supervisory authority if you believe your rights have been violated. How to exercise: contact us via the channels above.

9.   Cookies and tracking technologies

  • We use cookies and similar technologies to enable site functionality, analyze usage, and support marketing. You can manage cookies in your browser settings.

10.   Data security

  • We implement appropriate technical and organizational measures, including encryption, access controls, backups, and security monitoring.

11.   Children’s privacy

  • We do not knowingly collect data from children without appropriate parental consent. If we become aware of any data from a child without consent, we will delete it.

12.   Changes to this policy

  • We may update this policy. We will post the updated policy on our site and indicate the effective date.

13.   Contact for privacy questions